<p>The largest change to DFARS cybersecurity requirements other than CMMC took place on February 1st, 2026, and nobody knew it happened. DFARS 7019 and 7020 have been replaced by DFARS clause 252.240-7997. Basic self-assessments have been eliminated. FAR 52.204-21 has a new number. And none of this went through rulemaking. This week we're diving deep into the mysterious world of class deviations and what they mean for defense contractors moving forward. </p>
<p> </p>
<p>RFO Website: https://www.acquisition.gov/far-overhaul </p>
<p> </p>
<p>DFARS RFO Deviations: https://www.acq.osd.mil/dpap/dars/dfars_far_overhaul_class_deviations.html </p>
<p> </p>
<p>CMMC class deviation: https://youtu.be/vC4IJ2JQ5NU?si=B8I9DII4ZEbQ2dNx </p>
<p> </p>
<p>7012 class deviation: https://youtu.be/voziZRAMvv4?si=HxIkpUWnxyergEUQ </p>